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Control of flexible systems under degradation or failure of sensors /actuators is consid- 
ered. A Linear Matrix Inequality framework is used to synthesize Hoo-based controllers, 
which provide good disturbance rejection while capable of tolerating real parameter un- 
certainties in the system model, as well as potential degradation or failure of the control 
system hardware. In this approach, a one-at-a-time failure scenario is considered, wherein 
no more than one sensor or actuator is allowed to fail at any given time. A numerical 
example involving control synthesis for a two-dimensional flexible system is presented to 
demonstrate the feasibility of the proposed approach. 


Introduction 

Control design for flexible systems is especially chal- 
lenging because these systems have a large number of 
modes with inherently small damping, some of which 
may reside within the desired control bandwidth. To 
exacerbate the problem further, the parameters asso- 
ciated with flexible systems, which are typically in 
modal form, are subject to varying degree of uncer- 
tainty. These include the modal frequencies, damping 
ratios, and shapes. A robust control design must take 
into account these uncertainties, which are generally 
modeled as parametric and/or non-parametric model 
uncertainties. Parametric uncertainties include the 
model uncertainties for those modes that are included 
in the model, whereas non-parametric uncertainties 
cover model uncertainties associated with the trun- 
cated modes. Flexible system control must provide at 
the least robust stability, and preferably, robust perfor- 
mance. To date, numerous works have been published 
in the literature dealing with various aspects of robust 
control of flexible systems . 1 3 Control design methods, 
such as Structured Singular Value Approach (p), 
and dissipative and passive techniques have provided a 
systematic framework for design of robust controllers 
for flexible systems. 

The problem considered here goes beyond robust 
control of flexible systems in that a control design 
methodology is sought to not only provide robustness 
against model uncertainties, but also accommodate 
control system hardware failures, such as sensor or 
actuator failures. Generally, sensor /actuator failure 
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can be divided into soft failures or hard failures. Soft- 
failure includes a partial loss of the instrument, re- 
sulting in an input-output degradation, i.e., a gain 
and phase change in the dynamics of the instrument. 
Hard failure refers to the total loss of the instru- 
ment. Since there is lack of methodology to deal 
with both soft and hard failures in a unified setting, 
control design and accommodation for each have fol- 
lowed different paths. Soft failures have traditionally 
been accommodated through control design with suffi- 
cient stability guarantees. The stability guarantees for 
single-input/single-output systems are typically han- 
dled through appropriate phase and gain margins. For 
multi-input/multi-output systems, the stability mar- 
gins required to deal with soft sensor/ actuator failures 
are attained through robust control design . 1,4 As 
for hard failures, they have been typically handled 
through introducing hardware redundancies in the de- 
sign. As one instrument fails, the fault detection and 
isolation system identifies the failing instrument, and 
the control logic replaces the instrument with a fresh 
redundant one. Of course, the fault detection and iso- 
lation is not an easy task. Moreover, guaranteeing the 
system’s safe behavior during the detection, isolation, 
and accommodation phases is even harder. 

This paper presents a methodology for the uni- 
fied treatment of soft and/or hard failure of sen- 
sors/actuators in presence of model uncertainties. A 
Linear Matrix Inequality framework is used to synthe- 
size //oo-based controllers, which provide good distur- 
bance rejection while capable of tolerating real param- 
eter uncertainties in the system model, as well as po- 
tential degradation or failure (soft and/or hard failure) 
of the control system hardware. Here, only actuator 
failure is considered, as the treatment of sensor failure 
would be similar. In this approach, a one-at-a-time 
failure scenario is considered, wherein no more than 
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one sensor or actuator is allowed to fail at any given 
time. This is reasonable approach considering that for 
most aerospace systems the chance of concurrent mul- 
tiple failures are very remote. A numerical example 
involving control synthesis for a two-dimensional flex- 
ible system is presented to demonstrate the feasibility 
of the proposed approach. 

Plant Description 

The dynamics of a typical flexible system are repre- 
sented by a linear, time- invariant second-order system 
for the purpose of control design. This includes flex- 
ible spacecraft in the so-called science mode, wherein 
fine pointing is maintained to enable science measure- 
ments. The order of this system can be in thousands or 
tens of thousands of states. However, following model 
reduction procedures (e.g., modal truncation, modal 
cost analysis, etc.) the order of the system can be re- 
duced to a manageable size. Finally, the dynamics of 
the flexible system is rewritten is a first-order state- 
space form, i.e, 

x = Ax + Bu 4- Hp (1) 

y = Cx (2) 

y p = Lx + D u u + D v p (3) 

where A denote the state matrix, matrices B , //, C, 
and L, represent the influence matrices for the control 
inputs, disturbances, measurement outputs, and per- 
formance outputs, respectively. The matrices D U} and 
D p , represent feed-through matrices associated with 
the performance outputs; x denotes the state vector; 
y denotes the measurement output vector; y p denotes 
the performance output vector; and p represents the 
exogenous disturbance vector. 

In most cases, the dynamics of the flexible system 
can be written in modal coordinates. This means 
that the modal frequency and damping information 
is isolated in the state matrix, while the modal ampli- 
tudes are isolated in the input/output influence ma- 
trices. Typically, there is uncertainty associated with 
all modal parameters. However, the uncertainty in the 
modal frequency, and to some degree the modal damp- 
ing, is of a more critical importance in robust control 
design. Hence, in this paper, the model uncertainty is 
mainly characterized by real parameter uncertainties 
in the state matrix A, i.e, 

A = A(oy, e=\9i ... 1 ( 4 ) 

where 0 is the uncertainty parameter vector, whose 
elements are bounded as follows. 

o* \et ey] (5) 


As mentioned previously, the paper considers the 
degradation and/or failure of sensors and actuators. 
This degradation/ failure may take the form of a 
gain variation, which affects the elements of the in- 
put/output influence matrices, or it may take the form 
of a phase variations, which would introduce additional 
dynamics into the system. In general, hardware fail- 
ure would bring about a combination of gain and phase 
variations. Here, it is assumed that the variations in 
the hardware (due to degradation) can be modeled as a 
linear augmentation to the system dynamics. Further- 
more, for simplicity of presentation the paper considers 
actuator failure case only. The sensor failure problem 
may be handled in a very similar fashion. Additional 
dynamics are augmented to the plant dynamics to ac- 
count for potential uncertainties in the actuators. The 
actuator uncertainty dynamics is added to the nomi- 
nal actuator dynamics (if any) and combined with the 
plant. The combined dynamics is given by 


z = Az + Bw -F Hp 

(6) 

y = Cz 

(7) 

y p = Lx + D w w + D p p 

(8) 


f x 1 

where z= denotes the combined state. The 

x a 

state matrix and influence matrices are obtained from 
the series connection of the plant dynamics (Eq. (1- 
3)) with the actuator uncertainty weighting dynamics 
given by 

x Q = A a x a + B a w (9) 

u - C a x a 4- D a w (10) 

The order of the actuator uncertainty weighting dy- 
namics would depend on the degree of gain and phase 
variations one desires to account for due to degrada- 
tion. 

Control Synthesis 

Control system design for flexible systems is chal- 
lenging because of the their special dynamic charac- 
teristics: a number of structural modes within the 
controller bandwidth; low, closely spaced modal fre- 
quencies; very small inherent damping; and insufficient 
knowledge of the parameters. For a control design 
to be considered feasible, it must (i) be of reason- 
ably low order; (ii) satisfy the nominal performance 
specification; and (iii) be robust to errors in the de- 
sign model. A feasible control design must be robust 
to parametric and noil-parametric uncertainties in the 
system model. In this paper, the errors or failures 
in the control system hardware, such as actuators, as 
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well as uncertainties in modal parameters are consid- 
ered. Specifically, uncertainties in modal frequencies 
(which are typically the most critical) are considered. 
Although, sensor degrad at ion /failure is not considered 
here, its treatment follows exactly that of actuator 
degradation/ failure problem. It is desirable to design a 
controller that can accommodate, to a specified degree, 
the failure and/or degradation of the control system 
hardware, while providing robust performance against 
uncertainties in modal frequencies. 

The basis of the control synthesis is an H <*, design. 
A block diagram of the closed-loop system, indicat- 
ing the feedback structure of the plant, controller, and 
uncertainty are shown in Figure 1. The performance 
requirement is defined in terms of the weighted out- 
put sensitivity transfer function from disturbances to 
the performance output . The weighting function W p 
is typically chosen for each channel to provide good 
disturbance rejection at low to mid frequencies as well 
as to provide integral action to minimize steady-state 
errors. An additional uncertainty in the system model 
in the form of unstructured input multiplicative is 
used. The weighting function W u , used to scale or dis- 
tribute the uncertainty, is chosen to emphasize model 
uncertainty in the mid-high frequency range. This un- 
certainty block not only provides for perturbations in 
the model, but is also serves to pose a proper standard 
Hoo control problem. The standard Hoc design is to 
minimize the weighted output sensitivity transfer func- 
tion from disturbances to the performance outputs, 
while providing robustness to the input multiplicative 
uncertainty as well. Now, if the purpose of the con- 
trol design was to solve this standard Hoc problem, 
a controller could be synthesized using a number of 
available tools. However, here the controller has to 
not only satisfy the H 0 0 problem, it also has to allow 
for real structured uncertainties in the state matrix (to 
account for uncertainties in the modal frequencies and 
damping). Moreover, it has to be able to accommo- 
date degradations and/or faults in the actuators. In 
order to accommodate the various requirements of the 
proposed control design, a Linear Matrix Inequality 
(LMI) framework is used. The LMI framework offers 
many advantages 5 7 

• LMI-formulated problems can be solved exactly 
via convex optimization algorithms 

• LMI formulations can accommodate a variety of 
design specifications and constraints concurrently. 

• Efficient convex algorithms are available 

The Hoc control problem can be formulated in an 
LMI setting as follows 6 


min 7 (11) 

X t Y,A,B,C,D t 'y,0 


S.t. 


' AXaBCa(*) t 
a + a t + c t d t b t 

H t A FlD T B T 
LX A E Z C 


O 

yaabca(*) t 

H T Y A- FZB t 
L + E Z DC 


(0 (0 

(•) (0 

-7 (0 

D zw A E Z DF W -*(Iz 


(12) 


< 0 


r* 

pi 



( 13 ) 


P>Pdcs ( 14 ) 

where terms (*) T and (•) are implied by symmetry, ma- 
trices X and Y are partition matrices related to the 
Lyapunov matrix; A, B } C , and D , are the controller 
matrices in a nonlinearly transformed coordinates ; 6 7 
is a real scalar whose minimum value denotes the Hoc 
norm; and P is a scaling parameter used to avoid po- 
tential conditioning problems for the matrix I - XY , 
whose inversion is required in realizing the controller 
in the physical space. Pdcs is a threshold value larger 
than 1 . The H 0 Q LMI problem may also be recast from 
a convex minimization problem to a convex feasible so- 
lution problem, as follows 


find X,Y,A,B,C,Dn.P (15) 

s.t. 

r axaabca {*) t (•) 


A + A T + C t D t B t YA + BC + (*) T 
h t + Flb T B T h t y + fZb t 

LX + E Z C L + E Z DC 

(•) (') 1 

( 16 ) 

(•) (') 

-7/u, (0 

D zw + E Z DF W -7 . 

< 0 

U (-)1 <0 

(31 Y 

( 17 ) 

7 < 7 de. 

( 18 ) 

(3 (3 fldcs 

( 19 ) 

Here 7 dcs represents the desired H 0 G norm of the 
closed- loop system. 
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Model Uncertainty 

As mentioned earlier, there are real parametric un- 
certainties in the plant state matrix which represents 
uncertainties in the modal frequencies and damping. 
An LMI framework is an ideal setting to deal with 
such a problem. The problem is to find a controller (A, 
B , C, D) such that the LMI problems in Eqs. (11)- 
(19) are satisfied with the uncertain plant matrix A(B). 
Since, matrix A(0) appears in an affine form in these 
LMIs, then the LMIs would be identically satisfied for 
all values of the uncertain parameters 6 if and only 
if they are satisfied on the vertices of the hypercube 
formed by the lower bound and upper bound values 
of 6i,i = 1, . . . , s. Therefore, the LMI formulation to 
provide robustness against the parametric uncertain- 
ties may be written as 

find X,Y,A,B,C,D,i,0 (20) 


s.t. 


’ A(6 t )X -f BC + (*) T 
A + A T (0 t ) + c t d t b t 
h t + f*d t b t 

LX 4- E Z C 



(21) 

o 

V 

(22) 

7 ^ 7 des 

(23) 

0 > 0dcs 

(24) 


where Of are the corners of the uncertainty hypercube. 

So far, the uncertainties considered have been those 
associated with the plant model. However, possible 
uncertainties in the actuators, due to degradation or 
failure, also need to be considered. The approach 
here is to consider actuator faults or failures one at 
a time. In other words, the control design considers 
only individual faults or failures in the actuators and 
the nominal controller must provide tolerance against 
these failures. The LMI framework can easily accom- 
modate the one- at-a- time fault or failure approach. 
This is accomplished by adding an H LMI (similar 
to Eq. (21)) for each actuator, i.e. , 


(•) 

fa(^) + £C + (*) t 
h t y + fZb t 
L + E z DC 

(*) (0 " 

(*) (*) - r 


Length 

15 m 

Mass 

101.25 Kg 

Inertia 

1898.44 Kg rn 2 

1st Modal Frequency 

7.29 Rad/s 

1st Modal Damp. Ratio 

0.1 % 

2nd Modal Frequency 

20.11 Rad/s 

2nd Modal Damp. Ratio 

0.1 % 


Table 1 System Properties 


’ A{0 t ,di)X + B(6i)C + (*) T 
A + A T (0 e ,6 i )+C T D T B T {6 i ) 

H t + F^D T B T (6 i ) 

LX + E Z C 

(■). 

y A(0t,5i) + BC + (*) T (25) 

h t y + FlB T 

L + E Z D 

(0 () 1 

(•) (') < o 

-a'ylw _ (•) 

CD ZW + E Z DF W -cry I z 

where 6i,i = 1, . . . ,m» denotes the corners of the un- 
certainty hypercube associated with actuator No. ”i” 
fault or failure, and a is a scalar which defines the 
acceptable level of performance degradation from the 
fully operational system with no hardware failures. A 
value of a = 1 dictates that the same level of per- 
formance is required from the system with one failed 
actuator as the fully operational system. Typically, a 
should be chosen greater than 1. 

Numerical Results 

The proposed approach for fault-accommodating 
control is applied to the control synthesis of a two- 
dimensional flexible system, as shown in Figure 2. The 
inertia and geometric properties of the system along 
with the frequencies and damping ratios of its first 
two flexible modes (used in the control synthesis) are 
provided in Table 1. 

Control System Hardware and Setup 

As shown in Figure 2, there are three control in- 
puts available to provide fine pointing for the system. 
These inputs are three reaction wheels, one at the left 
end (x = Om), one at the mid-length (x = 7.5m), and 
one at the two- thirds of the length (x = 10m). It is as- 
sumed that attitude measurements are available from 
a set of three collocated attitude sensors. Here, sensors 
and actuators dynamics are not considered. There is 
an exogenous disturbance source (force disturbance) at 
one third of the length (x = 5m). The performance of 
the system is measured in terms of the attitude point- 
ing error at the right end (x = 15m). As mentioned 
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earlier, the control design is based on H 0 0 synthesis. 
Figure 1 shows the closed-loop block diagram. A 6th- 
order model of the system, which included the first two 
flexible modes, were used in the control design. 

The performance requirements were defined in terms 
of the weighted output sensitivity transfer function 
from the disturbance to the performance output. The 
weighting function was chosen as W p = to 

provide good disturbance rejection at low to mid fre- 
quencies. Uncertainty in the system model in the form 
of unstructured input multiplicative was used. The 
weighting function, used to scale or distribute the un- 
certainty, was chosen as W u = 0 '^^q 0 °^ to emphasize 
model uncertainty in the high frequency range. As for 
the structured plant uncertainty, a 5% uncertainty in 
the modal frequency of the first two modes were as- 
sumed. 

To accommodate the potential uncertainties in the 
actuators due to degradation or failure, additional dy- 
namics (in the form of a fictitious actuator dynamics) 
were augmented with the plant dynamics. The aug- 
mented dynamics were as follows for each control input 
channel. 

A a = -100; B a = 100; C a = l;D a = 0 (26) 

Uncertainties 5 X and S 2 were considered for the matri- 
ces B a and A a , respectively, to account for the poten- 
tial actuator fault /failure. S x was chosen to vary from 

0 to 1 to allow for a variation from nominal perfor- 
mance to total failure, and <52 was chosen to vary from 

1 to 10. The nominal augmentation and its associ- 
ated uncertainties were chosen such that they provide 
a range of perturbations in the system due to actua- 
tor degradation/failure. These perturbations run the 
gamut from full actuator operation (with no impact 
on plant dynamics) to the total failure of any one ac- 
tuator, with potential gain loss and/or phase delays 
in between. For these failures the design required the 
system to remain stable, but allowed an increase of up 
to a factor of five in Hoc norm constraint, i.e., a = 5. 

Control Synthesis 

The LMI framework, described in the previous sec- 
tion, was used to synthesize a fault-accommodating 
controller. The controller was to provide a desired H oo 
norm performance for the weighted output sensitivity 
transfer function from disturbances to the performance 
output, while tolerating uncertainties in the modal fre- 
quencies of the first two flexible modes, and allowing 
for degradation or total failure of any one of the three 
reaction wheels. As indicated earlier, these require- 
ments reduce to the solution of the system of LMIs 
given in Eqs. (21)-(25). These LMIs were solved us- 
ing the LMI Control Toolbox. 8 The design parameters 
j3des and 7 des were chosen to be 1.25 and 1.0, respec- 
tively. The LMI feasibility problem was solved using 
the ”feasp” routine of the LMI Toolbox. 8 


The singular value plot for the resulting controlled 
system is given in Figure 3. Figure 3a shows the sin- 
gular values of the open and closed- loop system over 
the full path, including both performance and robust- 
ness conditions. Figure 3b show performance alone, 
comparing the disturbance rejection of the exogenous 
disturbance for the open-loop and closed- loop system. 
It is observed that the i/oo-based controller provides 
good disturbance rejection at low-mid frequencies, in- 
cluding the first flexible mode. However, this is not the 
case above the first flexible frequencies because of the 
uncertainties associated within the modal frequency 
and the ramp-up of actuator input uncertainty. 

To validate the robustness of the system against real 
parametric uncertainties the controller was applied to 
a set of plant models which had randomly chosen fre- 
quency errors within the 5% bound specified in the 
design. A histogram of the resulting H <*, norm for 
these systems is shown in Figure 4 and shows very 
little variation in performance due to these errors. 

In Figure 5 singular values plots are shown for the 
closed-loop system subject to hard failures in each of 
the actuators. In can be seen that actuator-3 is the 
most critical to maintaining performance, while the 
loss actuator- 1 has little impact. All cases however, 
retain a level of performance as specified by the de- 
sign constraints. This observation is also borne out in 
the norms shown in Table 2. Finally, the fault 
tolerance of the controller was also demonstrated by 
simulation. A linear simulation of the system response, 
subject to band-limited white noise disturbance, was 
performed for each failure case . Figure 6 shows the 
system under operational conditions, and with the 
failure of each actuator in turn in for 1000 second du- 
rations. 

Concluding Remarks 

Control of flexible systems subject to degradation 
or failure of sensors/actuators was considered. A Lin- 
ear Matrix Inequality framework was developed to 
synthesize i/cc-based controllers, which provide good 
disturbance rejection while capable of tolerating real 
parameter uncertainties in the system model, as well 
as potential degradation or failure of the control sys- 
tem hardware. In this approach, the controller can 
accommodate faults or failures in one sensor or actu- 
ator at any given time. This is a reasonable approach 
for most aerospace applications, which typically have 
limited number of highly reliable components. A nu- 
merical example involving the control synthesis for 
a two-dimensional flexible system was worked out to 
demonstrate the feasibility of the proposed approach. 
The results demonstrated the effectiveness of the fault 
accommodating control strategy as well as the feasi- 
bility of LMI-based approach for multi-objective syn- 
thesis problems. 
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Case 

||G zw ||oo 

||G p d || oo 

Fully Operational 

0.482 

0.069 

Hard Failure, Actuator-1 

0.479 

0.064 

Hard Failure, Actuator-2 

0.551 

0.156 

Hard Failure, Actuator-3 

1.993 

0.989 


Table 2 Hoc norms for coupled Robustness and 
Performance path, G Z w , and for performance path 
alone, G p(i , under single- fault hard failures. 




Fig. 2 Schematic of the two-dimensional flexible 
system 
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Fig. 3 Maximum singular value plot for open and 
nominal closed loop system. 
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Fig. 5 Maximum singular value plot for closed- 
loop system under different actuator failures 
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Fig. 4 Variation of H oo norm with 5% errors in 
natural frequency, 500 cases 



Fig. 6 Time response of pointing under distur- 
bance for four conditions: Operational, Act-1 Fail- 
ure, Act-2 Failure, and Act-3 Failure 
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